JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 104.28.240.188

104.28.240.188 was found in our database!

This IP was reported 155 times. Confidence of Abuse is 100%: ?

100%

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇺🇸 United States of America
City	Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 104.28.240.188

Whois 104.28.240.188

IP Abuse Reports for 104.28.240.188:

This IP address has been reported a total of 155 times from 106 distinct sources. 104.28.240.188 was first reported on July 25th 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇱🇹 NotACaptcha	2026-08-01 04:46:34 (1 minute ago)	webserver:443 [01/Aug/2026] "HEAD /.env.backup HTTP/1.1" 302 5582 "-" "Mozilla/5.0 (Macintosh; Inte ... show more webserver:443 [01/Aug/2026] "HEAD /.env.backup HTTP/1.1" 302 5582 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" webserver:443 [01/Aug/2026] "HEAD /.aws/credentials HTTP/1.1" 302 5587 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" webserver:443 [01/Aug/2026] "GET /sitemap.xml HTTP/1.1" 302 5832 "https://www.google.com/search?q=asunledevles.duckdns.org" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" webserver:443 [01/Aug/2026] "GET /_rNd9xZ7kL3 HTTP/1.1" 302 5832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" webserver:443 [01/Aug/2026] "HEAD /.aws/credentials HTTP/1.1" 404 5574 "https://asunledevles.duckdns.org/.aws/credentials" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" webserver:443 [01/Aug/2026] "GET /robots.txt HTTP/1.1" 200 5911 "https://asun... show less	Web App Attack
🇳🇴 Bots.go.to.hell	2026-08-01 04:44:45 (3 minutes ago)	This IP was detected by CrowdSec triggering custom/http-range-ban	Web App Attack Port Scan
🇩🇪 neckaralb-admin.de	2026-08-01 04:41:58 (6 minutes ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 wordpresshosting.solutions	2026-08-01 04:28:51 (19 minutes ago)	Web app vulnerability scanning detected. Evidence: 104.28.240.188 - - [01/Aug/2026:04:28:50 +0000] " ... show more Web app vulnerability scanning detected. Evidence: 104.28.240.188 - - [01/Aug/2026:04:28:50 +0000] "HEAD /.env HTTP/1.1" 404 1172 "https://[DOMAIN]/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.28.240.188 - - [01/Aug/2026:04:28:51 +0000] "HEAD /.env.bak HTTP/1.1" 404 1172 "https://[DOMAIN]/.env.bak" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" show less	Web App Attack
🇫🇮 paissangroup	2026-08-01 04:25:42 (22 minutes ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-08-01 03:46:48 (1 hour ago)	104.28.240.188 - - [01/Aug/2026:03:46:47 +0000] "HEAD /.env.dist HTTP/1.1" 404 5105 "-" "Mozilla/5.0 ... show more 104.28.240.188 - - [01/Aug/2026:03:46:47 +0000] "HEAD /.env.dist HTTP/1.1" 404 5105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" ... show less	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-01 03:44:33 (1 hour ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇦🇹 services.org.pl	2026-08-01 03:33:45 (1 hour ago)	open() "/var/www/html/sitemap_index.xml" failed (2: No such file or directory), client: 104.28.240.1 ... show more open() "/var/www/html/sitemap_index.xml" failed (2: No such file or directory), client: 104.28.240.188, server: api.services.org.pl, request: "GET /sitemap_index.xml HTTP/1.1", host: "api.services.org.pl", referrer: "https://www.google.com/search?q=api.services.org.pl" show less	Bad Web Bot Web App Attack
🇫🇷 Allolatr	2026-08-01 03:03:46 (1 hour ago)	Aug 1 05:03:42 [redacted] j443: ::ffff:104.28.240.188 [redacted].com "HEAD /.dev.vars HTTP/1.1" 400 ... show more Aug 1 05:03:42 [redacted] j443: ::ffff:104.28.240.188 [redacted].com "HEAD /.dev.vars HTTP/1.1" 400 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" Aug 1 05:03:45 [redacted] j443: ::ffff:104.28.240.188 [redacted].com "GET /.env HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" Aug 1 05:03:46 [redacted] j443: ::ffff:104.28.240.188 [redacted].com "GET /.git/config HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"... show less	Web App Attack
Anonymous	2026-08-01 00:51:54 (3 hours ago)	http scanning for .env files ...	Hacking Web App Attack
Anonymous	2026-08-01 00:34:56 (4 hours ago)	104.28.240.188 - - [01/Aug/2026:00:34:55 +0000] "GET /.env.dist HTTP/1.1" 403 4398 "https://www.goog ... show more 104.28.240.188 - - [01/Aug/2026:00:34:55 +0000] "GET /.env.dist HTTP/1.1" 403 4398 "https://www.google.com/search?q=api.shop.gassycat.be" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" ... show less	Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-08-01 00:13:51 (4 hours ago)	Web vulnerability probing: /.netrc	Web App Attack
🇫🇷 pm33	2026-08-01 00:07:56 (4 hours ago)	Wordpress login attempts	Brute-Force
🇦🇺 Klaverstyn	2026-07-31 23:13:00 (5 hours ago)	Repeated 403 Forbidden responses	Web App Attack
Anonymous	2026-07-31 22:13:54 (6 hours ago)	WordPress admin/config access attempt: 104.28.240.188 - - [31/Jul/2026:23:13:54 +0100] "GET /wp-adm ... show more WordPress admin/config access attempt: 104.28.240.188 - - [31/Jul/2026:23:13:54 +0100] "GET /wp-admin HTTP/1.1" 200 234 "https://www.google.com/search?q=[sub domain]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" show less	Hacking Web App Attack

Showing 1 to 15 of 155 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 220.245.133.202

🇳🇱 213.176.26.19

🇲🇲 202.165.91.163

🇺🇸 162.216.149.121

🇳🇵 157.10.100.12

🇻🇳 113.173.77.255

🇨🇳 110.179.80.136

🇷🇴 92.118.39.231

🇳🇱 91.92.47.252

🇨🇳 61.136.246.87

🇫🇷 54.37.10.124

🇳🇱 204.76.203.212

🇦🇿 185.143.197.45

🇺🇸 162.216.150.210

🇭🇰 156.225.1.116

🇸🇬 103.250.10.63

🇫🇷 85.217.140.49

🇺🇸 66.132.186.210

🇳🇱 204.76.203.214

🇩🇪 193.124.20.243